Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139302e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3139302e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: A5KgUpORc4mk7Qr7oFSmIqHPqV/ubcYiiqZ9x0++uv8=
Subject key identifier: D5:D2:14:49:22:64:50:E2:36:58:2D:9D:1E:2A:F5:F1:9E:87:45:C1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3E6B95A7C7CB9794B3CA3297A35A3DA51390DCD1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139302e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:34 +0000
ROA not before: Wed 22 Jul 2026 16:31:34 +0000
ROA not after: Wed 21 Jul 2027 16:36:34 +0000
asID: 20473
IP address blocks: 145.79.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6b:95:a7:c7:cb:97:94:b3:ca:32:97:a3:5a:3d:a5:13:90:dc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:34 2026 GMT
Not After : Jul 21 16:36:34 2027 GMT
Subject: CN=D5D21449226450E236582D9D1E2AF5F19E8745C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:7b:f1:95:22:7a:01:dc:66:26:eb:45:b7:
06:cb:08:7e:41:ff:fa:51:b4:ac:5e:5b:fc:d4:49:
fd:57:ab:d6:5b:f3:1e:1e:2a:29:25:b1:70:b8:91:
a1:49:e0:e5:1e:8e:6d:ff:cf:6c:f2:d5:d6:41:2f:
9a:f9:bc:52:90:78:c2:a6:88:4c:da:ce:c3:03:55:
b1:b2:a8:57:fd:dd:c8:1f:65:27:56:df:ab:33:d5:
7c:d3:02:95:8c:98:cc:93:ca:c2:73:12:72:b8:b0:
fd:48:9a:4f:c5:3f:76:73:75:e7:74:4f:e2:9a:41:
57:dc:66:94:e8:15:88:cd:8f:88:fb:92:6b:02:78:
10:4b:5c:67:85:cd:b2:fd:4e:e1:27:35:64:13:e9:
cd:57:ad:c1:48:2c:ac:ab:c3:cd:49:69:69:89:15:
7b:05:be:29:d1:c1:c8:87:b6:9b:c1:f9:f3:3d:fa:
c6:c8:e1:97:80:57:6d:36:12:a1:74:6f:69:ae:d0:
16:92:bd:0f:de:b6:c5:0e:c5:59:95:87:48:86:d5:
09:51:ad:b7:14:32:9c:a3:95:a2:f9:c0:da:fd:8b:
be:2e:60:24:e9:e0:96:11:6d:7d:58:e4:95:cb:dd:
4a:14:92:99:5b:f1:26:ad:5b:f5:b3:a9:db:96:f4:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:14:49:22:64:50:E2:36:58:2D:9D:1E:2A:F5:F1:9E:87:45:C1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139302e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.190.0/24
Signature Algorithm: sha256WithRSAEncryption
99:89:41:7a:f5:03:0f:a7:bc:07:4f:4f:96:05:32:da:a6:fc:
05:81:59:b3:4e:70:6e:4e:28:81:f7:11:2a:02:48:7a:40:61:
00:31:1c:5a:16:e4:4e:c9:0d:dc:fb:dd:67:d1:42:69:26:50:
4b:11:64:fd:46:3d:cb:7e:d6:8b:3e:6e:29:d1:57:53:2f:b8:
10:a8:24:34:08:8d:e1:33:3f:1e:b9:06:77:27:58:97:d0:bf:
b5:e2:ab:e6:f1:1a:7f:5f:d4:7a:29:02:2c:09:cb:b2:6b:19:
f1:6f:04:2f:f4:e5:55:8d:29:35:41:7c:ca:bb:a6:3c:36:8e:
a1:cf:80:aa:00:4a:97:d5:81:ea:e0:58:0a:a7:bd:51:7d:39:
fe:89:db:0d:03:01:44:97:3e:eb:a0:92:0b:72:a3:a7:91:c9:
ca:f7:9c:ee:30:ca:af:81:b2:f2:86:5b:db:1e:81:4e:27:06:
8a:d0:73:b4:92:5f:61:de:e6:6a:de:9a:c8:48:20:dd:42:5c:
37:da:35:84:e2:8f:c7:4b:88:2b:0d:5d:f6:13:c2:b0:37:e1:
2b:55:fc:6a:ba:d5:50:ce:32:45:f2:bd:ba:8b:19:6c:d4:8d:
7f:ec:95:c4:19:3d:47:ab:f0:05:c3:dd:19:ba:82:24:50:34:
72:8a:32:45
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUPmuVp8fLl5SzyjKXo1o9pROQ3NEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjIxNjMxMzRaFw0yNzA3MjExNjM2MzRaMDMxMTAvBgNV
BAMTKEQ1RDIxNDQ5MjI2NDUwRTIzNjU4MkQ5RDFFMkFGNUYxOUU4NzQ1QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgXvxlSJ6AdxmJutFtwbLCH5B
//pRtKxeW/zUSf1Xq9Zb8x4eKiklsXC4kaFJ4OUejm3/z2zy1dZBL5r5vFKQeMKm
iEzazsMDVbGyqFf93cgfZSdW36sz1XzTApWMmMyTysJzEnK4sP1Imk/FP3Zzded0
T+KaQVfcZpToFYjNj4j7kmsCeBBLXGeFzbL9TuEnNWQT6c1XrcFILKyrw81JaWmJ
FXsFvinRwciHtpvB+fM9+sbI4ZeAV202EqF0b2mu0BaSvQ/etsUOxVmVh0iG1QlR
rbcUMpyjlaL5wNr9i74uYCTp4JYRbX1Y5JXL3UoUkplb8SatW/WzqduW9Eq/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU1dIUSSJkUOI2WC2dHir18Z6HRcEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM5
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kU++MA0GCSqGSIb3DQEBCwUAA4IBAQCZiUF69QMPp7wHT0+WBTLapvwFgVmzTnBu
TiiB9xEqAkh6QGEAMRxaFuROyQ3c+91n0UJpJlBLEWT9Rj3LftaLPm4p0VdTL7gQ
qCQ0CI3hMz8euQZ3J1iX0L+14qvm8Rp/X9R6KQIsCcuyaxnxbwQv9OVVjSk1QXzK
u6Y8No6hz4CqAEqX1YHq4FgKp71RfTn+idsNAwFElz7roJILcqOnkcnK95zuMMqv
gbLyhlvbHoFOJwaK0HO0kl9h3uZq3prISCDdQlw32jWE4o/HS4grDV32E8KwN+Er
VfxqutVQzjJF8r26ixls1I1/7JXEGT1Hq/AFw90ZuoIkUDRyijJF
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:08 2026 by rpki-client